Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ebnhSrMXNy2vBiakyTd4cQh5sBo.roa
File: ebnhSrMXNy2vBiakyTd4cQh5sBo.roa (raw, json)
Hash identifier: 8GkU1EUGbHZldFIvnhJ9iCMMQ9wgn+uuk6Houdsiu2Y=
Subject key identifier: 79:B9:E1:4A:B3:17:37:2D:AF:06:26:A4:C9:37:78:71:08:79:B0:1A
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 28AC
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ebnhSrMXNy2vBiakyTd4cQh5sBo.roa
Signing time: Fri 01 Sep 2023 10:05:38 +0000
ROA not before: Fri 01 Sep 2023 10:05:38 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 118.232.4.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10412 (0x28ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:05:38 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=79B9E14AB317372DAF0626A4C93778710879B01A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d4:cb:31:cc:de:76:5e:ad:4b:a2:8b:d6:39:
b4:39:ad:56:93:28:7d:7b:e1:03:c7:d3:3b:27:8b:
d4:e2:63:6d:59:d8:0f:ac:69:6b:dd:32:4a:ec:58:
e1:54:2a:60:94:02:b8:13:09:a3:af:67:46:12:7e:
fb:b4:3e:1e:11:02:b2:4e:ae:db:b4:fd:0a:f7:7d:
3d:2d:48:e2:01:c4:85:0b:02:60:5d:d1:24:92:81:
3a:89:8c:31:76:ca:40:ec:1d:ad:a0:12:d3:f5:19:
92:28:4b:6f:f7:02:58:14:f4:58:de:8a:95:79:85:
93:7e:f5:8d:9a:03:84:27:da:79:07:d8:bc:62:80:
1f:75:34:95:f5:cc:d7:f2:a3:02:00:95:db:1c:1d:
8a:ce:f5:9a:d4:21:cb:ad:49:50:a3:3a:c9:95:c0:
86:87:de:9d:4d:7c:02:bb:7b:ac:7d:c6:c1:58:f2:
be:15:aa:55:d3:aa:dc:73:86:4e:05:76:9d:eb:41:
9f:69:fd:9b:e0:bd:20:c9:04:c9:f0:5f:bc:18:9a:
67:b1:b0:5d:79:e5:6f:ae:e6:58:41:50:de:7b:b0:
50:80:49:a7:2e:45:4b:fd:7a:7a:bd:74:52:20:94:
c8:4b:c7:20:82:e2:25:39:d8:cb:53:fe:56:6c:6c:
03:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:B9:E1:4A:B3:17:37:2D:AF:06:26:A4:C9:37:78:71:08:79:B0:1A
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ebnhSrMXNy2vBiakyTd4cQh5sBo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.4.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:a5:b3:57:20:12:4f:51:11:25:87:fb:f9:75:08:aa:f7:5b:
99:a0:c1:39:98:00:70:85:42:42:77:3b:b0:14:0d:f3:c0:ed:
e0:ee:c5:cd:09:d2:23:3e:40:98:96:3e:54:5a:20:b5:be:3c:
53:5c:df:d3:fd:63:48:3d:07:6d:39:d3:1f:8d:c5:89:a9:bb:
12:a9:98:51:ed:57:38:64:7a:9c:f7:82:6e:3c:9c:e1:e0:29:
de:d6:91:76:ea:fc:56:1d:8f:f6:92:ea:05:c1:6b:a7:ec:21:
e8:e6:51:a5:13:cc:b5:7f:8a:3f:a9:d6:54:25:df:48:6e:8e:
ae:08:b0:b8:76:58:57:ea:0c:b4:62:da:6a:e9:ad:e5:2a:87:
bd:d8:35:ed:17:db:b6:47:bc:6b:35:fe:e7:68:ee:9a:bc:e1:
b8:59:6c:61:83:1a:f4:48:1c:6f:c2:b2:11:36:3c:ac:f3:1d:
44:46:3c:81:e0:43:f9:b0:3b:8f:96:25:a9:40:0f:85:38:4d:
b2:53:dd:92:75:f9:e3:12:a1:4b:b0:5d:65:7e:66:5e:e8:67:
c5:56:cf:7e:08:f1:61:19:0c:af:a7:dc:b4:90:82:11:0c:8e:
e5:ce:cc:d4:c1:32:6e:41:d2:74:2b:1f:95:ee:fd:df:74:d9:
58:f6:36:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:17:35 2025 by rpki-client